The Facility Composer Website at http://ff.cecer.army.mil/fc/ suffered from a severe SQL injection vulnerability. This system has since gone offline.
00354a4c946f871316edd1c5c3d2941cbb7289494faafbeac408a3e682a6540f# Title : Facility Composer Website SQL Injection
# Description : The Facility Composer Website at ff.cecer.army.mil/fc/
suffers from an SQL Injection vulnerability.
# Author : Tosser
# E-mail : ht7015@gmail.com
# Proof : Go to
https://ff.cecer.army.mil/fc/login.jsp
and type something like ' or 'x'='x in the username and password fields.
This will grant you Administrator privileges on the system.
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed